v0.153.72

• Trust a checkout in an app that asks -- Claude Code's folder-trust dialog, codex's, mise's -- only where its tier says trust = true, at launch: a session of the workspace's or its own scope has it in the ~/.claude.json it is seeded with, one of the host's has it written to the host's file by the binds hook, codex gets its -c override, and mise MISE_TRUSTED_CONFIG_PATHS, nothing written to its records; a bare tier may say it too, and the wrapper then trusts the checkout's root on the host before the agent starts. Off, the default, each app asks as it would anywhere, so strict now asks where it used to trust every workspace silently, and the activation step that pre-trusted $HOME, every workspace group and chase.apps.claude.preTrustPaths goes with that option: which checkouts are trusted follows from the tier that sorts them, and the example's trusted says so (3c6fbe2)